Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          mPJ4ivimt/5yceq90Q7KhpDXfIe/YZq6yKd2DdIWSPw=
Subject key identifier:   89:A9:70:9D:31:61:57:A3:CD:55:61:0E:00:7B:F9:A7:9A:0F:58:28
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       01977B300F3FBE309E80D18CE6D6D056CF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          05FF
Signing time:             Tue 17 Jun 2025 00:00:36 +0000
Manifest this update:     Tue 17 Jun 2025 00:00:36 +0000
Manifest next update:     Wed 18 Jun 2025 00:00:36 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: RUaXMnoBdoElPNGqokcgPVKz2mlE1iR8km0icUbUjQo=)
                          2: qv58PcziHSozk6pOK4h_LgXLS7w.roa (hash: BZchB3z4vvljLfndUGS0R7LquQNr6/obSV/f0pocufU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:30:0f:3f:be:30:9e:80:d1:8c:e6:d6:d0:56:cf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Jun 17 00:00:36 2025 GMT
            Not After : Jun 18 00:00:36 2025 GMT
        Subject: CN=89a9709d316157a3cd55610e007bf9a79a0f5828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:b5:96:b5:8e:17:dc:1c:03:af:96:63:35:
                    00:aa:61:a6:32:d4:44:7d:28:db:69:5f:5c:eb:4f:
                    e8:f1:ae:f0:05:03:61:e7:46:a8:98:4a:ce:e4:8c:
                    45:d4:d2:e8:f1:a9:b6:e5:c4:40:b6:cc:0a:f2:09:
                    34:44:4d:56:17:f6:89:ec:99:76:bb:cb:59:09:2c:
                    af:a3:41:8b:70:18:69:0a:23:f2:e2:f5:ef:f4:98:
                    fe:4f:2a:8c:fb:04:d7:12:07:d9:78:ec:a5:24:c0:
                    83:e2:2d:f4:15:94:9f:a3:13:95:ff:1c:90:38:5e:
                    c6:4e:1a:05:cf:0f:a7:cb:fd:3f:e6:90:68:6a:d0:
                    17:84:7c:cd:8b:e2:7e:6c:7a:42:2f:8a:7c:1d:1e:
                    21:ce:94:76:34:51:2f:38:db:c5:a1:eb:76:17:b6:
                    2f:bd:7a:7b:ab:c5:c6:1b:92:13:c6:5e:69:45:79:
                    99:8d:2d:59:e0:ba:63:aa:1f:58:af:fd:76:25:89:
                    32:37:93:5f:ce:fb:61:7e:e8:90:56:c0:e6:5f:85:
                    ce:76:2d:1d:68:5c:25:ae:a2:b7:3d:00:3d:df:e2:
                    ca:2a:e1:cf:be:b5:da:71:be:f0:a0:1f:c6:ec:86:
                    56:c6:d5:19:53:3f:a4:81:f1:a2:ef:20:07:ca:b4:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:70:9D:31:61:57:A3:CD:55:61:0E:00:7B:F9:A7:9A:0F:58:28
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:2b:4f:ec:4e:76:19:20:02:f9:3e:45:a6:ec:34:37:1a:
         14:a3:0c:3d:52:cc:31:9b:1c:e1:16:a0:35:c3:37:ea:28:ac:
         c8:f0:1e:1c:bc:75:6c:10:76:59:b4:1c:b2:ff:fe:d3:ba:18:
         70:c9:45:24:96:fc:5e:34:ad:36:3c:81:25:a9:0d:68:57:7a:
         02:85:1a:c1:2f:3e:b4:be:5a:ab:ae:61:5f:5e:a7:ee:d7:35:
         a0:4a:69:7b:94:7a:9f:ae:ee:da:37:42:d6:1e:b7:01:9e:cc:
         14:9a:7d:d6:14:2d:0b:dc:b2:13:28:27:1a:ec:ab:ef:99:03:
         04:16:92:de:fa:53:74:f2:84:25:89:6a:aa:42:38:e3:58:f3:
         94:16:0a:05:34:9b:8b:7d:d5:ac:b3:68:d0:6b:1f:6f:f2:7c:
         6b:26:4c:a2:02:c2:b8:90:4a:7c:4e:00:32:35:b3:ed:36:e4:
         26:54:b5:8d:34:a7:a9:e0:f5:18:12:52:b6:1e:aa:20:bd:70:
         0b:71:e2:40:c2:85:c7:c6:9d:e8:b7:0c:41:1d:17:d9:b1:34:
         7b:7c:62:4c:b8:1e:37:f1:05:ba:a5:5b:87:b4:fe:c0:7e:d8:
         0f:1d:d2:da:ad:93:e4:1a:40:00:d4:14:55:7f:a8:60:6f:58:
         6e:8c:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:01:52 2025 by rpki-client